Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.mft
File:                     lSamckeK-nVEXY0H3MV8BYlm7-I.mft (raw, json)
Hash identifier:          HtDodi4+vz4+YyFLHRKCl9ybp1R/rFKtWl5AT1PubF4=
Subject key identifier:   BC:EC:B6:A9:78:07:37:E1:9C:19:70:EB:66:29:1A:A9:BE:23:A5:49
Authority key identifier: 95:26:A6:72:47:8A:FA:75:44:5D:8D:07:DC:C5:7C:05:89:66:EF:E2
Certificate issuer:       /CN=A91FA1BE/serialNumber=9526A672478AFA75445D8D07DCC57C058966EFE2
Certificate serial:       02E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSamckeK-nVEXY0H3MV8BYlm7-I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.mft
Manifest number:          02DD
Signing time:             Thu 21 May 2026 01:24:42 +0000
Manifest this update:     Thu 21 May 2026 01:24:41 +0000
Manifest next update:     Thu 28 May 2026 01:24:41 +0000
Files and hashes:         1: lSamckeK-nVEXY0H3MV8BYlm7-I.crl (hash: C7qv173qASo31Ao/LEVUaKv6wXBNs1a5HLWOEWAa7tM=)
                          2: 6F46908C2D3411ED92165562C4F9AE02.roa (hash: UPDUd4t5zx8UFYbNLzFGnvRhyMjEHl7Tb9rUHZFXp40=)
                          3: 6E98B3182D3411ED92165562C4F9AE02.roa (hash: 7/ANmUusyhHaIQ0U3dh4piILL1EQvQjyTLSsoXWQ5XU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.crl
                          rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSamckeK-nVEXY0H3MV8BYlm7-I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 01:24:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 745 (0x2e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FA1BE, serialNumber=9526A672478AFA75445D8D07DCC57C058966EFE2
        Validity
            Not Before: May 21 01:24:41 2026 GMT
            Not After : May 28 01:24:41 2026 GMT
        Subject: CN=6a0e5eda-f951
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5c:d3:30:48:0a:18:72:49:14:24:e7:d3:ef:
                    6c:e4:d6:f9:47:73:31:9a:2c:2f:79:b6:92:19:54:
                    3e:f7:84:88:98:82:da:8d:b2:5f:34:56:67:46:6b:
                    38:4d:24:6b:23:fb:eb:86:42:4f:a4:51:a5:db:a4:
                    46:28:80:91:32:7c:b1:74:f8:d4:8e:94:c3:c9:f3:
                    37:9f:ad:b9:61:7a:3a:ba:a0:58:05:5e:4a:5e:47:
                    6b:44:16:c2:47:41:45:41:e2:23:2b:49:c6:0e:c7:
                    8d:d9:8b:d0:2d:0c:32:fa:28:a5:7d:e4:a0:10:14:
                    b0:1f:49:d8:b5:e0:20:86:5f:67:57:80:9e:28:fd:
                    6b:51:e3:b6:eb:c7:34:08:a4:ab:7f:ba:15:c6:7d:
                    38:25:27:35:ae:3a:81:95:02:85:03:cc:74:4d:f9:
                    bc:9d:cf:7a:df:e4:57:3c:29:dd:e9:d1:6d:ce:de:
                    53:4e:b5:40:69:75:66:09:49:2a:3a:a2:47:e7:ac:
                    c7:71:2e:ae:d0:5f:38:61:d2:ee:d0:fd:59:dc:84:
                    9d:98:f5:17:39:6d:f1:d7:27:f1:79:fc:5f:00:1a:
                    a7:c2:35:d9:ca:58:04:6c:dd:67:9e:15:68:39:da:
                    b0:b2:8c:1d:92:6a:d8:3d:a4:df:bd:f1:93:22:e2:
                    d0:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:EC:B6:A9:78:07:37:E1:9C:19:70:EB:66:29:1A:A9:BE:23:A5:49
            X509v3 Authority Key Identifier:
                keyid:95:26:A6:72:47:8A:FA:75:44:5D:8D:07:DC:C5:7C:05:89:66:EF:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSamckeK-nVEXY0H3MV8BYlm7-I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:c6:d6:0e:de:7a:3a:00:94:b0:5c:a0:ef:58:22:82:22:a9:
         e1:ec:e0:27:af:9f:87:e7:5d:17:29:15:9c:5a:e1:8c:dd:44:
         87:5d:e1:ac:3f:4c:6d:ec:47:8e:5c:60:e4:c6:b7:d1:85:f8:
         d5:a6:c0:af:43:ec:7b:ad:ad:81:b5:b1:8c:39:58:98:8b:d3:
         cc:8c:80:a9:be:7b:c5:e6:9b:67:87:fc:15:b1:6a:41:d7:22:
         00:75:c7:38:3f:84:7a:96:83:9f:ba:4e:52:af:a4:43:a1:5c:
         2c:f8:1f:5e:df:19:ea:33:c7:31:0f:07:7e:29:69:db:48:5d:
         40:18:dd:e5:25:e8:86:bb:01:e8:bd:b7:16:ed:cf:9b:48:aa:
         a4:c1:f4:7c:7b:6d:18:64:68:f9:33:78:43:7c:61:94:f4:c4:
         87:0a:09:4e:5e:1c:4b:ed:16:0d:30:92:4d:69:eb:f5:cb:d5:
         5b:cb:26:34:18:91:9a:04:6d:93:44:12:9d:3f:89:90:99:40:
         34:dd:68:42:86:bf:5f:94:fc:65:6c:ff:5b:3b:c6:44:82:ee:
         59:b4:b6:35:04:33:a8:c2:81:37:9d:51:3a:9b:9f:ed:4e:06:
         3f:82:5f:fe:2d:eb:7e:3d:5e:dc:24:1e:ce:43:19:1f:7c:c5:
         63:28:c1:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 15:07:29 2026 by rpki-client